Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-03-2026 Ran by moran (04-03-2026 19:05:56) Running from C:\Users\moran\Downloads Microsoft Windows 11 Pro Version 25H2 26200.7922 (X64) (2025-07-23 08:42:41) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= (If an entry is included in the fixlist, it will be removed.) Administrator (S-1-5-21-3815476893-3251729537-2019210730-500 - Administrators - Disabled) DefaultAccount (S-1-5-21-3815476893-3251729537-2019210730-503 - Limited - Disabled) Guest (S-1-5-21-3815476893-3251729537-2019210730-501 - Limited - Disabled) klinc (S-1-5-21-3815476893-3251729537-2019210730-1001 - Administrators - Enabled) => C:\Users\klinc klinc_25dlsv2 (S-1-5-21-3815476893-3251729537-2019210730-1002 - Limited - Disabled) moran (S-1-5-21-3815476893-3251729537-2019210730-1003 - Administrators - Enabled) => C:\Users\moran WDAGUtilityAccount (S-1-5-21-3815476893-3251729537-2019210730-504 - Limited - Disabled) WsiAccount (S-1-5-21-3815476893-3251729537-2019210730-1005 - Limited - Disabled) => C:\Users\WsiAccount Šmiki (S-1-5-21-3815476893-3251729537-2019210730-1010 - Limited - Enabled) => C:\Users\Šmiki ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) BlueStacks (HKLM\...\BlueStacks_nxt) (Version: 10.42.163.1002 - now.gg, Inc.) CapCut (HKU\S-1-5-21-3815476893-3251729537-2019210730-1001\...\CapCut) (Version: 7.1.0.2881 - Bytedance Pte. Ltd.) Defender Security Update (HKLM\...\{9269CED2-C987-41C0-AC5E-C335F969E92E}) (Version: 1.0.0.0 - Norton) Discord (HKU\S-1-5-21-3815476893-3251729537-2019210730-1001\...\Discord) (Version: 1.0.9225 - Discord Inc.) Discord (HKU\S-1-5-21-3815476893-3251729537-2019210730-1010\...\Discord) (Version: 1.0.9224 - Discord Inc.) Endpoint Protection SDK (HKLM\...\{68E1CCB4-4965-4713-BDEB-77F6D6C9BF9D}_is1) (Version: 1.0.2601.7834 - Avira Operations GmbH) Hidden Epic Games Launcher (HKLM-x32\...\{026CCAB2-D54F-43D6-A3AC-10825D893A63}) (Version: 1.3.150.0 - Epic Games, Inc.) Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Epic Online Services (HKLM-x32\...\{88FE81B2-A29B-4500-926C-D9F798539574}) (Version: 3.0.1 - Epic Games, Inc.) Fortect (HKLM\...\Fortect) (Version: 7.3.4.6 - Fortect) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 142.0.7444.176 - Google LLC) Google Play Games (HKLM\...\GooglePlayGames) (Version: 26.2.697.0 - Google LLC) Java 8 Update 401 (64-bit) (HKLM\...\{71024AE4-039E-4CA4-87B4-2F64180401F0}) (Version: 8.0.4010.10 - Oracle Corporation) Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 142.0.3595.94 - Microsoft Corporation) Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 145.0.3800.82 - Microsoft Corporation) Hidden Microsoft GameInput (HKLM\...\{ECB4BDD1-984C-9F25-299C-A9EF75C14197}) (Version: 10.1.26100.6879 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-3815476893-3251729537-2019210730-1001\...\OneDriveSetup.exe) (Version: 25.206.1021.0003 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-3815476893-3251729537-2019210730-1003\...\OneDriveSetup.exe) (Version: 25.087.0506.0001 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-3815476893-3251729537-2019210730-1010\...\OneDriveSetup.exe) (Version: 26.007.0112.0002 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation) Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden NitroSense Config (HKLM\...\{F51DD689-A5D0-4A69-A39D-1735773117B1}) (Version: 5.0.1452 - ULIC Tek Inc.) NitroSense Installer (HKLM-x32\...\{5280ca27-ec9e-4ea1-8346-8f5fe96981fe}) (Version: 5.0.1452 - ULIC Tek Inc.) NitroSense Prerequisites (HKLM\...\{048F53E0-B0C8-4854-8A31-7573F1C67120}) (Version: 5.0.1452 - ULIC Tek Inc.) Hidden NVIDIA App 11.0.5.420 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.5.420 - NVIDIA Corporation) NVIDIA FrameView SDK 1.5.11504.36206172 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.5.11504.36206172 - NVIDIA Corporation) NVIDIA Graphics Driver 591.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 591.74 - NVIDIA Corporation) NVIDIA HD Audio Driver 1.4.5.7 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.5.7 - NVIDIA Corporation) NVIDIA PhysX System Software 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation) Roblox Player for klinc (HKU\S-1-5-21-3815476893-3251729537-2019210730-1001\...\roblox-player) (Version: - Roblox Corporation) Roblox Player for Šmiki (HKU\S-1-5-21-3815476893-3251729537-2019210730-1010\...\roblox-player) (Version: - Roblox Corporation) Spotify (HKU\S-1-5-21-3815476893-3251729537-2019210730-1001\...\Spotify) (Version: 1.2.79.427.g80eb4a07 - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) TLauncher (HKLM-x32\...\TLauncher) (Version: 2.9334 - TLauncher Inc.) TotalAV 6.6.51 (HKLM-x32\...\TotalAV) (Version: 6.6.51 - Total Security Limited) <==== ATTENTION TruckersMP Launcher (HKU\S-1-5-21-3815476893-3251729537-2019210730-1001\...\TruckersMP) (Version: 1.3.15 - TruckersMP) Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 169.2.12961 - Ubisoft) Viber (HKLM\...\{03257830-C86E-457E-8629-C478B264164D}) (Version: 25.7.0.0 - 2010-2025 Viber Media S.a.r.l) Hidden Viber (HKU\S-1-5-21-3815476893-3251729537-2019210730-1001\...\{2EB009C9-7C1D-45DB-A323-118A80056B17}) (Version: 27.2.0.0 - 2010-2025 Viber Media S.a.r.l) Packages: ========= Acer Purified Voice Console (R) -> C:\Program Files\WindowsApps\AcerIncorporated.AcerPurifiedVoiceConsoleR_2.0.9.0_x64__48frkmn4z8aw4 [2025-07-22] (Acer Incorporated) DTS:X Ultra -> C:\Program Files\WindowsApps\DTSInc.DTSXUltra_1.13.15.0_x64__t5j2fzbtdg37r [2025-07-22] (DTS, Inc.) NitroSense for Notebook -> C:\Program Files\WindowsApps\ULICTekInc.NitroSenseforNotebook_5.0.1452.0_x64__nt9dgb7efx6bt [2025-11-25] (ULIC Tek Inc.) [Startup Task] NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-10] (NVIDIA Corp.) Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.53.380.0_x64__dt26b99r8h8gj [2025-12-21] (Realtek Semiconductor Corp) ==================== Custom CLSID (Whitelisted): ============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-3815476893-3251729537-2019210730-1001_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> "C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" -ToastActivated => No File CustomCLSID: HKU\S-1-5-21-3815476893-3251729537-2019210730-1001_Classes\CLSID\{6282d2e9-5906-bbf9-4b71-0c2869c6a835}\localserver32 -> C:\Program Files\Google\Play Games\current\service\Service.exe (Google LLC -> Google LLC) CustomCLSID: HKU\S-1-5-21-3815476893-3251729537-2019210730-1001_Classes\CLSID\{6a27a1a9-7be8-1491-04ca-ee68a211c258}\localserver32 -> C:\Program Files\Google\Play Games\current\service\Service.exe (Google LLC -> Google LLC) CustomCLSID: HKU\S-1-5-21-3815476893-3251729537-2019210730-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC) CustomCLSID: HKU\S-1-5-21-3815476893-3251729537-2019210730-1003_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvaci.inf_amd64_3420b0f600026006\nvshext.dll [2025-12-31] (NVIDIA Corporation -> NVIDIA Corporation) ==================== Codecs (Whitelisted) ==================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Drivers32: [MidisrvTransferComplete] => 1 HKLM\...\Drivers32: [midi1] => C:\WINDOWS\system32\wdmaud2.drv [143360 2026-03-03] (Microsoft Windows -> Microsoft Corporation) HKLM\...\Drivers32: [midi1] => C:\Windows\SysWOW64\wdmaud2.drv [91648 2026-03-03] (Microsoft Windows -> Microsoft Corporation) ==================== Shortcuts & WMI ======================== ==================== Loaded Modules (Whitelisted) ============= 2025-11-30 12:25 - 2025-11-30 12:25 - 000144384 _____ () [File not signed] C:\Program Files (x86)\Microsoft\Edge\Application\dlls\SHLWAPI.dll 2026-03-04 18:12 - 2026-02-01 10:53 - 003001344 _____ () [File not signed] C:\Program Files\Fortect\ffmpeg.dll 2026-03-04 18:12 - 2026-02-01 10:53 - 000493056 _____ () [File not signed] C:\Program Files\Fortect\libegl.dll 2026-03-04 18:12 - 2026-02-01 10:53 - 008019968 _____ () [File not signed] C:\Program Files\Fortect\libglesv2.dll 2026-03-04 18:12 - 2026-02-01 10:53 - 005577728 _____ () [File not signed] C:\Program Files\Fortect\vk_swiftshader.dll 2025-11-30 12:25 - 2025-11-30 12:25 - 000144384 _____ () [File not signed] C:\Program Files\Google\Chrome\Application\dlls\SHLWAPI.dll 2026-01-02 18:09 - 2026-01-02 18:09 - 000000000 ____L (NVIDIA Corporation) [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll ==================== Alternate Data Streams (Whitelisted) ======== ==================== Safe Mode (Whitelisted) ================== ==================== Association (Whitelisted) ================= ==================== Internet Explorer (Whitelisted) ============= BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre-1.8\bin\ssv.dll [2023-12-19] (Oracle America, Inc. -> Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre-1.8\bin\jp2ssv.dll [2023-12-19] (Oracle America, Inc. -> Oracle Corporation) ==================== Hosts content: ========================= (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2024-04-01 08:26 - 2024-04-01 08:24 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts ==================== Network =========================== (Currently there is no automatic fix for this section.) DNS Servers: 192.168.1.1 Windows Firewall is enabled. Network Binding: ============= Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys Wi-Fi: MediaTek Wi-Fi 6 MT7921 Wireless LAN Card -> mtkwl6ex.sys ==================== Other Areas =========================== (Currently there is no automatic fix for this section.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA App\NvDLISR;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Fortect HKU\S-1-5-21-3815476893-3251729537-2019210730-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\ThemeA\img20.jpg HKU\S-1-5-21-3815476893-3251729537-2019210730-1003\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\DesktopSpotlight\Assets\Images\image_3.jpg HKU\S-1-5-21-3815476893-3251729537-2019210730-1005\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg HKU\S-1-5-21-3815476893-3251729537-2019210730-1010\Control Panel\Desktop\\Wallpaper -> C:\Users\Šmiki\Pictures\audi quattro.jpg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)